GitLab HackerOne
GitLab.com and CE/EE. Issue trackers, CI, auth, GraphQL. Famous for well-written scope and HackerOne reports.
Tags: vendor, hackerone, graphql
- Program model
- Vendor on HackerOne
- Regions
- Global
- Payout
- USD via HackerOne
Specialties: web, graphql, ci, auth
How to approach it
Public response is a teaching archive. Read disclosed GitLab reports before you duplicate a 2018 IDOR.
- GraphQL and job artifacts have been perennial.
- Self-hosted CE in scope is a gift if you can run a local instance.